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1. □ Certified copies of the priority documents have been received. 
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International Bureau (PCT Rule 17.2(a)). 
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EXAMINER'S AMENDMENT 



An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment. It MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Andrew J. Cameron Registration No. 50,281 on August 3, 2007. 



The application has been amended as follows: 
Claims 11, 20, 26 have been amended as follows: 



1 1 . (Currently Amended) A method, comprising: 

measuring at least one integrity metric corresponding to a trusted portion of an 
original firmware configuration of a computer system, .wherein the trusted portion 
of the original firmware configuration includes a startup portion of at least one of 
system management mode (SMM) firmware code or platform management 
interrupt (PMI) firmware code; 

measuring an unqualified current portion of firmware during an operating system 
(OS)-runtime phase of the computer system ; 

storing a respective measurement corresponding to each of said at least one 
integrity metric in a corresponding platform configuration register (PCR) of a 
. trusted platform module(TPM); and 

sealing a secret to the TPM, the secret contained in a digest including the secret 
concatenated with the respective measurement(s) stored in the PCR(s), 
wherein a current firmware configuration includes a portion that matches the 
trusted portion of the original firmware configuration to unseal the secret 
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attempting to unseal the secret sealed to the TPM during an operating system 
(OS)- runtime phase of the computer system. 



20. (Previously Presented) An article of manufacture, comprising: 

a machine-readable medium have instructions stored thereon, which when executed 
perform operations including: 

measuring a trusted portion of an original set of firmware components during a pre- 
boot phase of a computer system; 

storing the measurement of the trusted portion of the original set of firmware 
components in a trusted platform module (TPM) platform configuration register 
(PGR); 

measuring a n unqualified portion of a current set of firmware components during an 
operating system (OS)-runtime phase of the computer system; 

determining if the measurement of the portion of the current set of firmware 
components matches the measurement of the portion of the original firmware 
components; and 

providing indicia to a processor to execute the portion of the current set of firmware 
components as a trusted process if the measurements match, 
wherein each of the original and current sets of firmware components correspond 
to a portion of at least one of system management mode (SMM) firmware code 
or platform management interrupt (PMI) firmware code. 



26. (Currently Amended) A system comprising: 

a processor, including microcode instructions; 
memory, operatively coupled to the processor; 
a trusted platform module, operatively coupled to the processor; and 
a flash device having firmware instructions stored thereon, which when executed on 
the processor perform operations including: 

retrieving a first measurement stored in the TPM, the first measurement 
comprising a measurement of a trusted portion of the firmware instructions; 

measuring a n unqualified current portion of firmware instructions during an 
operating system (OS)-runtime phase of the system, the current portion of 
firmware instructions analogous to the trusted portion of the firmware 
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instructions to obtain a second measurement, wherein each of the trusted and 
current portions of firmware instructions correspond to a portion of at least 
one of system management mode (SMM) firmware or platform management 
interrupt (PMI) firmware; 

comparing the first measurement to the second measurement; and 

if the first and second measurements match, programming the processor to 
execute the current portion of firmware Instructions as a secure process. 



Allowable Subject Matter 

The following is an examiner's statement of reasons for allowance: 
Claims 1 - 20 and 23 - 28 are allowed. 

The current prior art discloses the capability to measure a current portion of 
firmware during a pre-boot phase of a computer system operation. 

However, the current prior art does not disclose a system that is capable of 
measuring an unqualified current portion of firmware during an operating system (OS)- 
runtime phase of the computer system. An unqualified portion of firmware is a 
unmeasured portion of firmware. 

So as Indicated by the above statements, Applicant's arguments have been 
considered persuasive, in light of the set of claims with limitations as well as the 
enabling portions of the specification. The dependent claims further limit the 
independent claims and are considered allowable on the same basis as the 
independent claims as well as for the further limitations set forth. 

Any comments considered necessary by applicant must be submitted no later 
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than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Conclusion 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Carlton V. Johnson whose telephone number is 571- 
270-1032. The examiner can normally be reached on Monday thru Friday , 8:00 - 
5:00PM EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami can be reached on 571-272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300, 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
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For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-91 99 (IN USA OR CANADA) or 671-272-1 000. 
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